This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A911FBDF/BC175F383D3311F0921FDB1CC4F9AE02/k-ucLPZOblbp6NVWzMompR6L26A.mft
File: k-ucLPZOblbp6NVWzMompR6L26A.mft (raw, json)
Hash identifier: 9qk/t2kahyPtvvMQg/8as73/QNE/Z1flVoEJbMMwoN0=
Subject key identifier: 1E:AE:41:9C:EE:06:69:44:0C:38:3D:76:BC:CB:EC:58:83:69:1F:8A
Authority key identifier: 93:EB:9C:2C:F6:4E:6E:56:E9:E8:D5:56:CC:CA:26:A5:1E:8B:DB:A0
Certificate issuer: /CN=A911FBDF/serialNumber=93EB9C2CF64E6E56E9E8D556CCCA26A51E8BDBA0
Certificate serial: 63
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k-ucLPZOblbp6NVWzMompR6L26A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911FBDF/BC175F383D3311F0921FDB1CC4F9AE02/k-ucLPZOblbp6NVWzMompR6L26A.mft
Manifest number: 63
Signing time: Fri 05 Dec 2025 04:57:18 +0000
Manifest this update: Fri 05 Dec 2025 04:57:17 +0000
Manifest next update: Fri 12 Dec 2025 04:57:17 +0000
Files and hashes: 1: k-ucLPZOblbp6NVWzMompR6L26A.crl (hash: edSm/x9nSpTrbsMESV+LlkdZmj4Ey67lSyfC/Ct2flQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911FBDF/BC175F383D3311F0921FDB1CC4F9AE02/k-ucLPZOblbp6NVWzMompR6L26A.crl
rsync://rpki.apnic.net/member_repository/A911FBDF/BC175F383D3311F0921FDB1CC4F9AE02/k-ucLPZOblbp6NVWzMompR6L26A.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k-ucLPZOblbp6NVWzMompR6L26A.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 04:57:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99 (0x63)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911FBDF, serialNumber=93EB9C2CF64E6E56E9E8D556CCCA26A51E8BDBA0
Validity
Not Before: Dec 5 04:57:17 2025 GMT
Not After : Dec 12 04:57:17 2025 GMT
Subject: CN=6932662e-4993
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:70:82:e0:0a:f8:c3:ff:e0:76:f3:b0:71:0b:
cd:80:c0:73:b8:51:ca:63:09:fe:33:b2:84:08:e5:
9d:a0:95:44:69:3f:b5:c7:34:6c:4d:57:30:96:a8:
65:c5:f7:cb:2d:9a:30:02:da:b6:a0:52:61:44:5b:
f3:0b:6d:56:db:47:8e:45:ea:22:46:ba:81:73:1c:
e3:aa:2d:78:5c:e9:de:fb:50:93:97:0a:a4:33:63:
c9:ad:48:63:d2:36:c9:b5:92:ec:4f:86:62:e5:e7:
e3:46:62:77:65:81:7a:a4:3e:0a:11:40:ac:02:e9:
f7:b3:88:b3:40:ab:df:d2:da:12:0c:bd:a6:19:60:
27:12:32:b7:fe:ca:8d:7b:2d:a0:57:1e:71:9a:68:
34:b3:61:54:d9:46:48:f3:e6:45:f0:70:d7:e3:70:
fe:29:43:71:2c:a1:9b:7d:2f:42:cc:84:76:5a:c0:
4a:7b:8e:74:00:ac:c7:ef:13:a1:e3:d4:2a:57:d9:
80:13:21:dd:84:23:46:50:cb:8f:62:05:5e:08:b6:
92:4a:54:28:a2:a1:63:7d:ef:c7:9b:43:52:c8:ca:
04:b6:ce:21:87:d3:12:f4:82:13:ea:d3:43:86:6f:
9f:1d:3a:12:ab:b4:90:42:e2:2b:64:46:67:b5:eb:
05:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:AE:41:9C:EE:06:69:44:0C:38:3D:76:BC:CB:EC:58:83:69:1F:8A
X509v3 Authority Key Identifier:
keyid:93:EB:9C:2C:F6:4E:6E:56:E9:E8:D5:56:CC:CA:26:A5:1E:8B:DB:A0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911FBDF/BC175F383D3311F0921FDB1CC4F9AE02/k-ucLPZOblbp6NVWzMompR6L26A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k-ucLPZOblbp6NVWzMompR6L26A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911FBDF/BC175F383D3311F0921FDB1CC4F9AE02/k-ucLPZOblbp6NVWzMompR6L26A.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2e:2a:d9:2e:95:d1:c6:6d:0c:61:9e:ae:cc:60:0d:e8:95:3e:
25:27:c2:9b:84:49:a3:cf:f3:48:00:4c:b2:d6:14:59:46:5d:
d7:67:9a:44:62:49:f8:bf:83:c1:7f:2a:03:8e:fd:b7:04:5c:
20:53:03:03:f6:2c:23:c1:48:48:04:20:a9:ca:ae:21:58:00:
53:be:b8:63:cf:2e:bc:67:3d:7a:d8:87:b2:25:dd:13:df:c6:
91:00:c1:e8:ce:a7:86:c0:24:2e:16:fb:5e:25:11:60:ae:09:
6d:5f:c0:55:f5:1d:95:af:08:b8:3a:13:7c:a2:a7:2b:51:24:
0a:20:76:7c:0f:54:bf:da:ca:82:a4:ec:ca:6a:c8:92:db:4c:
7b:56:f6:5f:b5:9f:69:4e:7f:2b:27:2d:6b:4f:25:76:e3:ce:
a5:0b:10:4d:4e:fa:88:b0:61:69:e3:42:d4:60:df:fc:ce:7d:
c8:66:f6:fd:b9:8e:50:b5:ac:38:06:51:ce:a8:15:98:c0:40:
e1:98:22:06:b5:5e:c8:bb:b7:b4:bf:3a:be:96:6a:07:50:9e:
de:0e:b9:ff:dd:ce:5a:fb:26:db:a2:3d:93:ad:ca:ac:ba:ca:
b0:a3:40:7c:68:45:27:44:2f:97:d5:e3:be:2b:27:e5:8b:0c:
70:b2:5c:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 15:31:41 2025 by rpki-client